vuxvinh

Tutor LMS 1.6.4 - 4.1.3 - Subscriber+ Quiz Answer Key Disclosure

CookieYes < 3.5.8 - Contributor+ Stored XSS via Cookie Category Scripts

All-in-One Video Gallery < 5.0.0 - Unauthenticated Private and Draft Video Disclosure

MapPress Maps for WordPress < 2.97.15 - Unauthenticated Email Address Disclosure

GeoDirectory < 2.8.194 - Subscriber+ Media File Disclosure and Deletion via Path Traversal

GiveWP < 4.19.0.1 - Unauthenticated Unpublished Donation Form Disclosure via Form View Route

Salon Booking System < 10.31.11 - Salon Staff+ Stored XSS and SSRF via Salon REST 'image_url'

Salon Booking System < 10.31.11 - Unauthenticated Negative Booking Total via Discount Code

Salon Booking System < 10.31.9 - Unauthenticated Salon REST API Access via Predictable Access-Token

Tutor LMS 4.0.5 - 4.1.0 - Instructor+ Arbitrary Post Reparenting via IDOR